Reputation
18,498
Top tag
Next privilege 20,000 Rep.
Access 'trusted user' tools
Badges
1 27 75
Newest
 aes
Impact
~440k people reached

Dec
29
awarded  Enlightened
Dec
29
awarded  Nice Answer
Dec
29
comment Embedded devices Authentication, Integrity and Confidentiality
@DmitryKhovratovich: A per device AES-GCM key can take place of public/private key pairs but what happens if the server was hacked and all the keys go with it? But your point about needing a RNG is quite important, which I really didn't take into account. [Note: This was posted by the OP as a non-answer, because they've apparently lost access to their original account.]
Dec
29
comment Embedded devices Authentication, Integrity and Confidentiality
@RobertNACIRI: When the devices are programmed with public/private key pairs. The public keys are recorded and sent to the server by the admin. The devices are programmed in batches. The server certificate will be CA issued(for revocation and easy verification etc). The client key pair is generated at the factory. A bit like generating GPG key pairs. [Note: This was posted by the OP as a non-answer, because they've apparently lost access to their original account.]
Dec
29
revised Luby-Rackoff on Feistel ciphers
fix broken mathjax, misc. copyedits
Dec
29
answered secure embedded/microcontroller crypto using AES-ctr with hmac-sha2
Dec
28
comment How are random numbers for RSA generated?
Related: crypto.stackexchange.com/questions/71/…, crypto.stackexchange.com/questions/1970/…, crypto.stackexchange.com/questions/690/…, crypto.stackexchange.com/questions/2532/…. In fact, I'd say the first two are essentially dupes.
Dec
28
comment How are random numbers for RSA generated?
Ensuring that the number is odd will not save much time testing it, but it will save you some RNG calls. It's not a huge optimization, but it's trivial to make and does provide some benefit.
Dec
28
revised Prime Numbers in Discrete Log
edited tags
Dec
28
comment Power analysis and exponentiation by squaring
Thank you for contributing this answer! I do think your answer would be much improved if you could briefly summarize the key points from the references you cite in it. As it stands, your answer does not really provide a stand-alone answer to the question asked. You should also edit the additional information you've posted in the comments directly into your answer, if you think it's potentially worth retaining.
Dec
28
reviewed Leave Open Why shouldn't I use ECB encryption?
Dec
28
comment Why shouldn't I use ECB encryption?
@FedericoPoloni: Generally, because direct low-level access to the block cipher is sometimes useful for building higher-level constructions, such as new cipher modes. See this recent question for one example.
Dec
28
reviewed Leave Open Why would an Initialization Vector be supplied externally?
Dec
28
revised Why would an Initialization Vector be supplied externally?
copyedit, should -> would in title
Dec
28
comment Why shouldn't I use ECB encryption?
@giorgim: Even if you don't have any MAC or AE mode available, using CBC is still strictly better than ECB. If you do have a MAC function, CBC-then-MAC is a perfectly good AE mode.
Dec
28
comment Why shouldn't I use ECB encryption?
@giorgim: There's really no good reason to use ECB (except as a building block for other modes). Pretty much any crypto library provides at least CBC or CTR mode, and if not, they're trivial to implement yourself. Slap an HMAC (or CMAC) on top of that, and you're good to go.
Dec
28
revised Can I simulate iterated AES-ECB with other block cipher modes?
added 1 character in body; edited title
Dec
28
answered Can I simulate iterated AES-ECB with other block cipher modes?
Dec
28
comment What are the security implications of multiple hashing?
Ps. See also this related answer of mine. (I tried to look for it earlier, but couldn't find it here, because it turns out I actually posted it on SO.)
Dec
28
answered What are the security implications of multiple hashing?